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DETAILED ACTION 



1. This action is in response to the communication filed on 10/17/2006. 



Information Disclosure Statement 



2. An initialed copy of the information disclosure statement, filed on 10/17/2006 is 
attached to this office action. 



Claim Rejections - 35 USC § 101 



3. Amendment to Claim 1 overcomes the previous rejection under 35 USC 101 and 
the rejection is hereby withdrawn. 



Claim Rejections - 35 USC §112 

4- Examiner would like to explicitly restate that Claims 1-19 and Claims 25 - 43 
were rejected under 35 USC 112 and since applicant has not specifically addressed 
Claims 25 - 43, the rejections of Claim 25 - 43 are maintained. 
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5. Arguments with respect to Claims 1 - 19 are persuasive and Claims 1-19 
overcomes the previous rejection under 35 USC 101 and the rejection is hereby 
withdrawn. 

Response to Arguments 

6. Applicant's arguments filed on 10/17/2006, have been fully considered but they 
are not persuasive for the following reasons: 

Sasmazel et al. (U.S. Patent 6,263,432) teach an electronic ticketing, 
authentication and/or authorization security system which enables a user with an eticket 
(encrypted authentication information), to be authenticated and authorized for a 
requested service. Sasmazel furthermore, teach that the user need not re-authenticate 
each time a new server is accessed. 

7- Regarding independent amended Claim 1 and independent Claim 25, applicant 
argued that cited prior art, Sasmazel does not teach, "a first web server also providing a 
first type of service session functionality for the user in addition to an authentication 
functionality" and "for a second type of service session functionality for the user at said 
first web server that is not provided by the first web server, providing the second type of 
session functionality for the user". Applicant further argues that Sasmazel fails to teach 
the required combination of limitations of Applicants' method and system of single sign- 
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on user access to multiple web servers as recited in the independent claims 1 and 25. 
These arguments are not found persuasive. 

Sasmazel discloses authenticating a user at a first server (Column 2 lines 19-59 
and Column 7 line 39 - Column 8 line 55); detecting a client request at said first server, 
said first server determining a second server related to the request and in response 
thereto creating an encrypted authentication token related to the user and redirecting a 
web browser of the user to the second server (Column 2 lines 19-59; Column 6 line 10 
- 39; and Column 10 lines 9 - 50); transmitting the encrypted token from the first server 
to the second server via the user's web browser, wherein the authentication token 
comprises an expiration time and is digitally signed by the first server (Column 2 lines 
19-64 and Column 7 lines 18 - 67); authenticating the authentication token at the 
second server (Column 2 lines 19-64 and Column 8 line 1 - Column 9 line 28); and 
allowing the user to conduct a session at the second server (Column 9 lines 10 - 33). 
Sasmazel clearly teaches that a user does not have to "re-authenticate" each time a 
new server is accessed (Column 8 lines 42 - 52 and Column 9 lines 20 - 32). 

Furthermore, Sasmazel discloses, "When the hyperlink is activated, the web 
server 220 receives a request to initiate to initiate an information discovery session, 
specified by parameters embedded in the URL. In response, the web server gathers 
information internally or externally from another site in the network. In fact, the data 
source can even be another, remote information discovery web server 240 (see Column 
6 lines 28 - 39). 
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8. Applicant clearly has failed to explicitly identify specific claim limitations, which 
would define a patentable distinction over prior arts. Therefore, the examiner 
respectfully asserts that prior art does teach or suggest the subject matter broadly 
recited in independent claims 1 and 25. Dependent claims 2-19 and 26 - 43 are also 
rejected at least by virtue of their dependency on independent claims and by other 
reason set forth in this office action. 

Accordingly, the rejection for the pending Claims 1-19 and 25 - 43 is 
respectfully maintained. 

Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the 
manner and process of making and using it, in such full, clear, concise, and exact 
terms as to enable any person skilled in the art to which it pertains, or with which 
it is most nearly connected, to make and use the same and shall set forth the 
best mode contemplated by the inventor of carrying out his invention. 

9. Claims 25 - 43 are rejected under 35 U.S.C. 112, first paragraph, as failing to 
comply with the written description requirement. The claim(s) contains subject matter 
which was not described in the specification in such a way as to reasonably convey to 
one skilled in the relevant art that the inventor(s), at the time the application was filed, 
had possession of the claimed invention. 
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The amended independent Claim reads, " ...providing a first type of service 
session and "a second type of service session 

10. With respect to "a first type of service" and "a second type of service session", 
although the specification discloses a method and system for single sing-on a user 
access to multiple web servers, the user having a service selector, constructing an 
authentication token and if the expiration time has not passed, a second web server 
allows the user to conduct a session at the second web server, the specification does 
not disclose, "a first type of service session ...", and "a second type of service session". 
Applicant remarks/arguments merely recites the amended Claims 1 and 25 and does 
not clarify "a first type of service session and "a second type of service session", but 
directs to Page 4 lines 25 - Page 12 line 24 of instant application specification, which 
does not disclose "a first type of service session and "a second type of service 
session". - 

Examiner broadly interprets "a first type of service session and "a second 
type of service session" as authenticating a user to create an encrypted authentication 
token and redirecting a web browser of the user to transmit the encrypted authentication 
token. 

11. The dependent claims 26 - 43 are rejected at least by virtue of their dependency 
on the dependent claims. 
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Claim Rejections - 35 USC § 102 

The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

12. Claims 1-48 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Sasmazel et al. (U.S. Patent No.: 6,263,432). 

Regarding Claim 1 , Sasmazel teaches and describes 

authenticating a user by a first web server, the first web server also providing a 
first type of service session functionality for the user in addition to an authenticating 
functionality (Column 2 lines 19-59 and Column 7 line 39 - Column 8 line 55); 

detecting a client request for a second type of service session functionality for the 
user at said first web server that is not provided by the first web server, said first web 
server, for determining a second web server providing the second type of session 
functionality for the user and in response thereto creating an encrypted authentication 
token related to the user and redirecting a web browser of the user to the second web 
server (Column 2 lines 19-59; Column 6 line 10-39; and Column 10 lines 9 - 50); 

transmitting the encrypted token from the first web server to the second web 
server via the user's web browser, wherein the authentication token comprises an 
expiration time and is digitally signed by the first web server (Column 2 lines 19-64 
and Column 7 lines 1 8 - 67); 
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authenticating the authentication token by the second web server (Column 2 
lines 19-64 and Column 8 line 1 - Column 9 line 28); and 

providing the second type of service session functionality for the user to conduct 
a session by the second web server (Column 9 lines 10 - 33). 

Regarding Claim 25, Sasmazel teaches and describes 

a means for authenticating a user by a first web server, the first web server also 
providing a first type of service session functionality for the user in addition to an 
authenticating functionality (Column 2 lines 19-59 and Column 7 line 39 - Column 8 
line 55); 

means for detecting a client request for a second type of service session 
functionality for the user at said first web server, said first web server that is not 
provided by the first web server, said first web server, for determining a second web 
server providing the second type of session functionality for the user and in response 
thereto creating an encrypted authentication token related to the user and redirecting a 
web browser of the user to the second web server (Column 2 lines 1 9 - 59; Column 6 
line 1 0 - 39; and Column 1 0 lines 9 - 50); 

a means for transmitting the encrypted token from the first web server to the 
second web server via the user's web browser, wherein the authentication token 
comprises an expiration time and is digitally signed by the first web server (Column 2 
lines 1 9 - 64 and Column 7 lines 1 8 - 67); 
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a means for authenticating the authentication token at the second web server 
(Column 2 lines 1 9 - 64 and Column 8 line 1 - Column 9 line 28); and 

a means for providing the second type of service session functionality for the 
user to conduct a session by the second web server (Column 9 lines 10 - 33). 

Claim 2 is rejected as applied above in rejecting claim 1. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein the first web server and the second web 
server share a sub-domain (Fig. 2 #220, #240 and Column 6 lines 10-40 and Column 
10 lines 10-30). 

Claim 26 is rejected as applied above in rejecting claim 25. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the first web 
server and the second web server share a sub-domain (Fig. 2 #220, #240 and Column 
6 lines 1 0 - 40 and Column 1 0 lines 1 0 - 30). 

Claim 39 is rejected as applied above in rejecting claim 25. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further 
comprising: 
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a means for sending the digitally signed authentication token to the web browser 
of the computing device by the first web server (Column 7 lines 39 - Column 8 lines 58); 
and 

a means for sending the authentication token to the second web server by the 
web browser (Fig. 7 and Column 8 lines 57 - Column 9 line 9). 

Claim 3 is rejected as applied above in rejecting claim 2. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), further comprising examining the expiration time 
of the authentication token at the second web server and allowing the user to conduct a 
session at the second web server only if the expiration time has not passed (Fig. 3 #302 
and Column 9 lines 10 - 32). 

Claim 27 is rejected as applied above in rejecting claim 26. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further comprising a 
means for examining the expiration time of the authentication token at the second web 
server (Column Fig. 3 #302; Column 7 lines 45 - 47 and Column 9 lines 10-17). 

Claim 40 is rejected as applied above in rejecting claim 39. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further 
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comprising a means for allowing the user to conduct a session with the first web server 
(Fig. 2 #220 and Column 6 lines 10 - Column 9 line 15). 

Claim 4 is rejected as applied above in rejecting claim 3. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein the authentication token comprises a 
cookie (Column 6 lines 10 - 57). 

Claim 28 is rejected as applied above in rejecting claim 27. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the 
authentication token comprises a cookie (Column 6 lines 10 - 57). 

Claim 41 is rejected as applied above in rejecting claim 40. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein 
the second web server shares a sub-domain with the first web server (Fig. 2 #220, #240 
and Column 6 lines 10-40 and Column 10 lines 10 - 30). 

Claim 5 is rejected as applied above in rejecting claim 4. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein transmitting the encrypted authentication 
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token from the first web server to the second web server comprises transmitting the 
encrypted authentication token from the first web server to the user, and then from the 
user to the second web server (Column 8 lines 42 - 58). 

Claim 29 is rejected as applied above in rejecting claim 28. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the means for 
transmitting the encrypted authentication token from the first web server to the second 
web server comprises means for transmitting the encrypted authentication token from 
the first web server to the user, and then from the user to the second web server 
(Column 8 lines 42 - 58). 

Claim 42 is rejected as applied above in rejecting claim 41. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further 
comprising means for digitally signing the authentication token using public key 
encryption (Fig. 3 #306 Column 7 lines 18 - 54). 

Claim 6 is rejected as applied above in rejecting claim 5. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein authenticating the user at the first web 
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server comprises receiving a user name and password (Fig. 6 and Column 8 lines 1 - 
5). 

Claim 30 is rejected as applied above in rejecting claim 29. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the means for 
authenticating the user at the first web server comprises receiving a user name and 
password (Fig. 6 and Column 8 lines 1 -5). 

Claim 43 is rejected as applied above in rejecting claim 42. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further 
comprising a means for confirming a match with the digital signature (Fig. 13, Column 6 
lines 44 - Column 9 line 28). 

Claim 7 is rejected as applied above in rejecting claim 6. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein transmitting the encrypted authentication 
token from the first web server to a second web server comprises transmitting the 
authentication token from the first web server to a computer of the user; and 
transmitting the authentication token from the computer of the user of the second web 
server (Column 8 lines 42 - 58). 
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Claim 31 is rejected as applied above in rejecting claim 30. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein transmitting 
the encrypted authentication token from the first web server to a second web server 
comprises means for transmitting the authentication token from the first web server to a 
computer of the user; and means for transmitting the authentication token from the 
computer of the user of the second web server (Column 8 lines 42 - 58), 

Claim 8 is rejected as applied above in rejecting claim 7. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein the first web server and the second web 
server comprise a federation of web servers (Column 6 lines 10-40, Column 8 lines 46 
- 50 and Column 10 lines 40 - 50). 

Claim 32 is rejected as applied above in rejecting claim 31. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the first web 
server and the second web server comprise a federation of web servers (Column 6 lines 
1 0 - 40, Column 8 lines 46 - 50 and Column 1 0 lines 40 - 50). 

Claim 9 is rejected as applied above in rejecting claim 8. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein authenticating the authentication token at 
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the second web server comprises examining the cookie (Column 8 lines 46 - 60 and 
Column 9 lines 10 -15). 

Claim 33 is rejected as applied above in rejecting claim 32. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the means for 
authenticating the authentication token at the second web server comprises means for 
examining the cookie (Column 8 lines 46 - 60 and Column 9 lines 10-15). 

Claim 10 is rejected as applied above in rejecting claim 9. Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
web servers (Fig. 7 and Column 10 lines 10 - 30), further comprising URL encoding the 
authentication token (Column 6 lines 10-23 and Column 7 lines 38 - 67). 

Claim 34 is rejected as applied above in rejecting claim 33. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further comprising a 
means for URL encoding the authentication token (Column 6 lines 10-23 and Column 
7 lines 38-67). 

Claim 11 is rejected as applied above in rejecting claim 10. Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
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web servers (Fig. 7 and Column 10 lines 10 - 30), further comprising URL decoding the 
authentication token at the second web server (column 9 lines 10 - 32). 

Claim 35 is rejected as applied above in rejecting claim 34. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further comprising a 
means for URL decoding the authentication token at the second web server (column 9 
lines 10-32). 

Claim 12 is rejected as applied above in rejecting claim 11. Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
web servers (Fig. 7 and Column 10 lines 10 - 30), further comprising providing a web 
page to the user having a service selector (Column 6 lines 10 - 40). 

Claim 36 is rejected as applied above in rejecting claim 35. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further comprising 
providing a web page to the user having a service selector (Column 6 lines 10 - 40). 

Claim 13 is rejected as applied above in rejecting claim 12. Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
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web servers (Fig. 7 and Column 10 lines 10 - 30), wherein the service selector 
comprises a hyperlink (Fig. 7 and Column 6 lines 10 - 23). 

Claim 37 is rejected as applied above in rejecting claim 36. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the service 
selector comprises a hyperlink (Fig. 7 and Column 6 lines 10 - 23). 

Claim 14 is rejected as applied above in rejecting claim 13. Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
web servers (Fig. 7 and Column 10 lines 10 - 30), wherein the hyperlink comprises a 
URL for the second web server (Column 6 lines 10 - 40). 

Claim 38 is rejected as applied above in rejecting claim 37. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the hyperlink 
comprises a URL for the second web server (Column 6 lines 10 - 40). 

Claim 15 is rejected as applied above in rejecting claim 7. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig, 7 and Column 10 lines 10 - 30), comprising: 
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sending the digitally signed authentication token to the web browser of the 
computing device by the first web server (Column 7 lines 39 - Column 8 line 58); and 

sending the authentication token to the second web server by the web browser 
(Fig. 7 and Column 8 lines 57 - Column 9 line 9). 

Claim 16 is rejected as applied above in rejecting claim 15. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 10 lines 10 - 30), further comprising 
allowing the user to conduct a session with the first web server (Fig. 2 #220 and Column 
6 lines 10 - Column 9 line 15). 

Claim 17 is rejected as applied above in rejecting claim 16. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 10 lines 10 - 30), wherein the second 
web server shares a sub-domain with the first web server (Fig. 2 #220, #240 and 
Column 6 lines 10-40 and Column 10 lines 10 - 30). 

Claim 18 is rejected as applied above in rejecting claim 17. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 10 lines 10 - 30), further comprising 
digitally signing the authentication token using public key encryption (Fig. 3 #306 
Column 7 lines 18 - 54). 
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Claim 19 is rejected as applied above in rejecting claim 18. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 10 lines 10 - 30), further comprising 
confirming a match with the digital signature (Fig. 13, Column 6 lines 44 - Column 9 line 
28). 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
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13. Examiner's Note: Examiner has cited particular columns and line numbers in the 
references as applied to the claims above for the convenience of the applicant. 
Although the specified citations are representative of the teachings in the art and are 
applied to the specific limitations within the individual claim, other passages and figures 
may apply as well. It is respectfully requested from the applicant, in preparing the 
responses, to fully consider the references in entirety as potentially teaching all or part 
of the claimed invention, as well as the context of the passage as taught by the prior art 
or disclosed by the examiner. 

14. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See PTO Form 892. 

Applicant is urged to consider the references. However, the references should be 
evaluated by what they suggest to one versed in the art, rather than by their specific 
disclosure. If applicants are aware of any better prior art than those are cited, they are 
required to bring the prior art to the attention of the examiner. 
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15. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Pramila Parthasarathy whose telephone number is 571- 
272-3866. The examiner can normally be reached on 8:00a.m. To 5:00p.m.. If attempts 
to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Ayaz 
Sheikh can be reached on 571-232-3795. Any inquiry of a general nature or relating to 
the status of this application or proceeding should be directed to the receptionist whose 
telephone number is 703-305-3900. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR only. For more 
information about the PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). 



Pramila Parthasarathy 
January 10, 2006. 




